feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

services/anti-alchemy/src/app.py

@@ -0,0 +1,119 @@
+from flask import Flask, render_template, session, redirect, url_for
+from os import environ
+
+from antialchemy import *
+from helper import *
+
+app = Flask(__name__)
+app.config["SECRET_KEY"] = environ.get("SECRET_KEY", "SECRET_KEY")
+app.config["PERMANENT_SESSION_LIFETIME"] = 3 * 60
+qb = QueryBuilder()
+
+
+@app.get("/api/flag")
+@check_login_status
+def flag():
+    if session["user"] == "admin":
+        try:
+            return make_resp(200, open("/flag.txt").read())
+        except:
+            return make_resp(500, "Flag not found, please contact problem setter")
+
+    return make_resp(401, "You need to log in as admin to get the flag")
+
+
+@app.post("/api/login")
+@check_request_body
+def login(*args, **kwargs):
+    payload = kwargs.copy()
+
+    try:
+        conn = create_db_conn()
+        cur = conn.cursor()
+        cur.execute(
+            qb.generate(
+                {
+                    "table": "users",
+                    "username": payload["username"],
+                }
+            )
+        )
+        row = cur.fetchone()
+        if not row:
+            return make_resp(401, "Invalid username/password")
+
+        _, username, password_hash = row
+        password = payload.pop("password")
+
+        cur.execute(
+            qb.generate(
+                {
+                    "table": "salt",
+                    "username": username,
+                }
+            )
+        )
+        row = cur.fetchone()
+        if not row:
+            return make_resp(401, "Invalid username/password")
+
+        _, _, salt = row
+
+        if not check_password_hash(password, salt, password_hash):
+            return make_resp(401, "Invalid username/password")
+
+        session.clear()
+        session["user"] = username
+        return redirect(url_for("index"))
+
+    except Exception as e:
+        print(f"Exception: {e}")
+        return make_resp(400, "Bad Request")
+
+    finally:
+        cur.close()
+        conn.close()
+
+
+@app.get("/api/logout")
+@check_login_status
+def logout():
+    session.clear()
+    return redirect(url_for("index"))
+
+
+@app.post("/api/view")
+@check_login_status
+@check_request_body
+def view(*args, **kwargs):
+    payload = kwargs.copy()
+
+    try:
+        conn = create_db_conn()
+        cur = conn.cursor()
+        cur.execute(qb.generate(payload | {"table": "cwe"}))
+        rows = cur.fetchall()
+        return make_resp(200, "OK", {"rows": rows})
+
+    except Exception as e:
+        print(f"Exception: {e}")
+        return make_resp(400, "Bad Request")
+
+    finally:
+        cur.close()
+        conn.close()
+
+
+@app.get("/")
+def index():
+    try:
+        if session["user"]:
+            return render_template("dashboard.html")
+    except:
+        pass
+
+    return render_template("login.html")
+
+
+if __name__ == "__main__":
+    app.run(debug=True)